I have an application running on Jboss 4.2.2, implementing some custom authentication logic, then displaying a third party application in an iframe. The third-party application authenticates based on the request IP, which should be the IP of the server running JBoss. However, currently the request contains the IP of the client, so the authentication fails.
Is there some configuration option to override this behavior and use the server's IP in the request, or should I set up an apache proxy just for that?